Cyber Security Consultant

Fruition Group; Greater London; Hybrid; GBP 54,000 - 66,000; Full time

Job summary

Fruition Group is seeking a Cyber Assurance Consultant to deliver security assurance services to UK government clients. You will support CAF and ISO 27001 assessments, conduct cyber risk and control reviews, and produce actionable recommendations.

This role suits professionals with 2-3 years in cyber security or GRC, a willingness to travel to client sites, and a bias for clear, client-facing reporting. SC clearance preferred.

Qualifications

• 2–3 years' experience in cyber security or information assurance
• Experience with CAF and ISO 27001 assessments
• Willing to travel to UK client sites
• SC clearance preferred
• Experience in government or public sector environments

Responsibilities

• Supporting CAF and ISO 27001 assessments
• Cyber security audits and assurance reviews
• Security control and maturity assessments
• Gap analysis and remediation planning
• Cyber and information security risk assessments
• Producing clear client-facing reports and recommendations
• Working with government stakeholders across Government

Skills

Cyber security

GRC

Information assurance

Tools

NCSC CAF

ISO 27001

ISO 27002

Job description

Cyber Assurance Consultant

Up to £60,000 DOE | UK Hybrid | Client Travel Required | SC Preferred

We're working with a growing cyber consultancy delivering assurance, audit and compliance services across UK Government.

They're looking for a Cyber Security Assurance Consultant to support client engagements across areas including NCSC CAF, ISO 27001, cyber audit, risk and security assurance.

This would suit someone with around 2-3 years' experience in cyber security, information assurance, GRC or audit who wants to continue developing within Government cyber. More experienced candidates with existing certifications are also very welcome.

You’ll be involved in:

• Supporting CAF and ISO 27001 assessments
• Cyber security audits and assurance reviews
• Security control and maturity assessments
• Gap analysis and remediation planning
• Cyber and information security risk assessments
• Producing clear client-facing reports and recommendations
• Working with technical and non-technical stakeholders across Government

We're looking for experience across some of the following:

• Cyber security assurance, GRC or information assurance
• ISO 27001/ISO 27002
• NCSC CAF
• Security audit or compliance
• Cyber risk management
• Government or wider public sector environments

Existing SC clearance is preferred, and you'll need to be comfortable travelling to UK client sites when required.

The business can also support further development and professional certifications, including ISO 27001 and CISM, making this a strong opportunity for someone looking to build a long-term career in cyber assurance consulting.